CVE-2026-8149

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.

• CWE-1068

• https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908149

Published

May 8, 2026

Last Modified

Jul 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81479Dell OpenManage Server Administrator, versions prior to 11.1…5.8
• CVE-2026-8148NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a …7.8
• CVE-2026-81480Dell OpenManage Server Administrator, versions prior to 11.1…7.2
• CVE-2026-81481Dell OpenManage Server Administrator, versions prior to 11.1…7.5
• CVE-2026-81485A security vulnerability has been detected in danielpopamd l…5.3
• CVE-2026-81486A vulnerability was detected in bsmi021 mcp-file-context-ser…5.3
• CVE-2026-81490A database user able to create a view in a namespace that Mo…7.7
• CVE-2026-81491A flaw has been found in boxpositron with-context-mcp up to …7.3
• CVE-2026-81505Convoy is a cloud native webhooks gateway. Prior to 26.6.8, …7.1
• CVE-2026-81508ESF-IDF is the Espressif Internet of Things (IOT) Developmen…4.3
• CVE-2026-8151The Simple Membership MailChimp Integration WordPress plugin…5.4
• CVE-2026-81515Steeltoe is an open source project that provides a collectio…7.5